Great Circle Associates Firewalls
(September 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: regarding RFC1597 networks
From: cjolley @ iac . net
Date: Fri, 29 Sep 95 13:42:59 -0500
To: peterg @ airdata . com (Peter Gregory), Firewalls @ GreatCircle . COM
In-reply-to: <9509281904 . AA01123 @ radiatore . mccaw-stg . com>

There are a couple of ways I know of to allow RCF15-style addresses to
interact with the Internet.
 
One is by use of a dual homed application proxy firewall such as provided
by the TIS Guantlet or you could "roll your own" based on the TIS
Firewall Toolkit which is available without charge. It wouldn't surprise
be if there were other products that were similar.
 
There is a hardware item called the Network Address Translator. It can
be used to do an on-the-fly bi-directional translation of network addresses.
I'm not real familair with this product so I'm not certain if the use
of this product would require acqusition of registered addresses so that 
there can be a address-by-address mapping or if it can dynamicly assign
registered addresses for mapping to the RFC1597 addresses. If you have to
have a complete set of registered addresses, this product would allow you
to avoid a full-scale network renumbering and/or allow a phased 
implementation of a renumbering plan.  
 

On Thu, 28 Sep 1995, peterg @
 airdata .
 com (Peter Gregory) wrote:
>Okay, I know this doesn't *exactly* fit this list, but here I go anyway...
>
>While I'm clear on the concept of having a completely isolated RFC1597 
network,
>what about having RFC1597 SUBNETS that are connected to my 
Internet-connected
>network?  Machines on these subnets will not have the means to connect to
>the Internet, nor would these RFC1597 subnets be on a network path from my
>*legal* network addresses and the Internet.  Even Class C network numbers 
are 
>hard to acquire these days...
>
>Thanks,
>
>Pete
>
>
**** cjolley @
 iac .
 net <Carl Jolley>
**** All opinions are my own and not necessarily those of my employer ****



Follow-Ups:
References:
Indexed By Date Previous: Re: regarding RFC1597 networks and DNS
From: Yakov Rekhter <yakov @ cisco . com>
Next: Re: Just to clarify: Non_NIC addresses
From: Slava Kritov <scorp @ un . kiev . ua>
Indexed By Thread Previous: regarding RFC1597 networks
From: peterg @ airdata . com (Peter Gregory)
Next: Re: regarding RFC1597 networks
From: David Kovar <kovar @ NDA . COM>

Google
 
Search Internet Search www.greatcircle.com